Количество 7
Количество 7
GHSA-jcwr-x25h-x5fh
codehaus-plexus vulnerable to XML injection
CVE-2022-4245
A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.
CVE-2022-4245
A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.
CVE-2022-4245
A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.
CVE-2022-4245
A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml. ...
BDU:2024-01622
Уязвимость библиотеки codehaus-plexus фреймворка Apache Maven, связана с неверным ограничением XML-ссылок на внешние объекты, позволяющая нарушителю выполнить произвольный код
BDU:2024-01534
Уязвимость функции setKey() библиотеки для разбора аргументов командной строки minimist, позволяющая нарушителю реализовать атаку типа "загрязнение прототипа"
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-jcwr-x25h-x5fh codehaus-plexus vulnerable to XML injection | CVSS3: 4.3 | 1% Низкий | почти 3 года назад |
 | CVE-2022-4245 A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection. | CVSS3: 4.3 | 1% Низкий | почти 3 года назад |
 | CVE-2022-4245 A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection. | CVSS3: 4.3 | 1% Низкий | почти 4 года назад |
 | CVE-2022-4245 A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection. | CVSS3: 4.3 | 1% Низкий | почти 3 года назад |
| CVE-2022-4245 A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml. ... | CVSS3: 4.3 | 1% Низкий | почти 3 года назад |
 | BDU:2024-01622 Уязвимость библиотеки codehaus-plexus фреймворка Apache Maven, связана с неверным ограничением XML-ссылок на внешние объекты, позволяющая нарушителю выполнить произвольный код | CVSS3: 4.3 | 1% Низкий | почти 4 года назад |
| BDU:2024-01534 Уязвимость функции setKey() библиотеки для разбора аргументов командной строки minimist, позволяющая нарушителю реализовать атаку типа "загрязнение прототипа" | CVSS3: 9.8 | 5% Низкий | больше 5 лет назад |
Уязвимостей на страницу